To un-enroll a managed device from Systems Manager, the SM agent needs to be uninstalled from the device and removed from Dashboard. This article will detail how to remove the SM agent from each device type, as well as from the Dashboard.
Uninstalling Systems Manager from the Client Device
In order for a device to be fully disassociated with a Systems Manager network, the SM agent needs to be removed from the client itself. The following sections detail how to uninstall this application for each major platform.
Note: These instructions may differ based on the version of Windows used. For the most accurate instructions on removing a program, please refer to Microsoft Support.
If a Windows 10 management profile is installed, it can be removed from Windows Settings > Accounts > Work Access.
To uninstall the Systems Manager agent, use the Windows installer available under Systems Manager > Manage > Add Devices in Dashboard. If the installer is not available, the following steps may suffice:
- On the device, navigate to Control Panel > Programs and Features.
- Find the Meraki Systems Manager Agent in the list of programs, right-click and select Uninstall to remove from your system.
If you're unable to remove the agent through the programs list, a script similar to the following may be used from an elevated Command Prompt. Please note: you are deleting files and modifying registry keys at your own risk.
sc stop MerakiPCCAgent sc stop MerakiVNCService sc delete MerakiPCCAgent sc delete MerakiVNCService rd /s /q "C:\Program Files (x86)\Meraki\" reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Meraki /f
- To delete the agent: on the Mac, download our uninstaller from Dashboard by navigating to Systems Manager > Manage > Add Device > macOS. Extract this download and run the application to remove Systems Manager from the device.
- To delete the profile: on the Mac, open System Settings > Privacy & Security > Profiles, select the Meraki Management profile and use the subtract button to remove. Older MacOS systems ( < MacOS 13) will need to navigate to System Preferences > Profiles, which will only be shown if at least one configuration profile is installed on the device.
If the device has been enrolled via ADE the configuration may prevent management profile removal. To remove management or re-enroll an MacOS device, update the ADE settings in Dashboard to the desired configuration, then factory reset the device. To remove a device from management long term or permanently, release it from ADE via Dashboard or the Apple School Manager / Apple Business Manager portal.
If you no longer have physical access to the device and need to remove the agent, remote commands similar to the following may be used. Please note you are deleting files and executing commands at your risk.
launchctl unload /Library/LaunchDaemons/com.meraki.agentd.plist rm -f /Library/Application Support/Meraki/m_agent /Library/Application Support/Meraki/m_agent_upgrade rm -rf '/Library/Application Support/Meraki/' rm -f /Library/LaunchDaemons/com.meraki.agentd.plist
Uninstallation steps for Android devices vary slightly by model and OS version, as well as the original enrollment method.
- If the device was enrolled into device owner mode, it can only be unenrolled by factory resetting the device. Note that there is a restriction in Systems Manager > Manage > Settings > More Android that can prevent factory reset on the device. If this restriction is applied, the device can only have the profile completely removed if the device is factory reset through android recovery mode.
- If the device was enrolled with a work profile, first launch the Systems Manager app and remove the work profile from the 'configuration' tab. This will remove the work container and all associated work profile settings and apps.
For KNOX and work profile enrollments, continue with the following steps:
- Navigate on the device to Settings > Security > Device Administrators.
- Select Meraki Systems Manager, then select Deactivate to remove administrative privileges from Systems Manager.
- Navigate to Settings > Applications > Manage Applications or Settings > Apps. If the app is currently running, stop the process first.
- Select Systems Manager, then Uninstall to remove the app from the device.
- On the device, navigate to Settings > General > Device Management.
- Select Meraki Management, and select Remove to delete the management profile and any managed configuration profiles installed via SM.
If the device has been enrolled via ADE the configuration may prevent management profile removal. To remove management or re-enroll an iOS/iPadOS device, update the ADE settings in Dashboard to the desired configuration, then factory reset the device. To remove a device from management long term or permanently the best option is to release it from ADE via Dashboard or the Apple School Manager / Apple Business Manager portal.
Deprovisioning ChromeOS Devices
- In the Google admin console navigate to Devices > Chrome > Devices.
- Select the box next to the ChromeOS device.
- Click Deprovision
Note: Once a ChromeOS device is deprovisioned, it must be wiped before it can be re-enrolled again. Refer to Google's Wipe ChromeOS device data documentation for additional info.
Removing a Device from a Systems Manager Network
- Log in to Dashboard, and select the appropriate SM network.
- Navigate to Systems manager > Monitor > Devices
- Mark the checkbox for each device to remove.
- At the top of the Client list, select Delete > Remove from Network.
Impact of Device Removal
Solely removing a device from the Systems Manager Dashboard network will not have any immediate impact on the device, except prevent further MDM management until the device is re-enrolled. Any apps or profiles that are already pushed to a device will remain active will remain on the device.
To completely remove a device, be sure to follow the previous steps in this article to remove associated settings and apps from the device. You may also want to use selective wipe on a device if it will be allocated for a different purpose and existing managed profiles/apps should be removed.